org.mitre.openid.connect.service.impl.MITREidDataService_1_3 の継承関係図

org.mitre.openid.connect.service.impl.MITREidDataService_1_3 連携図

公開メンバ関数
boolean	supportsVersion (String version)

void	exportData (JsonWriter writer) throws IOException

void	importData (JsonReader reader) throws IOException

静的公開変数類
static final String	MITREID_CONNECT_1_0 = "mitreid-connect-1.0"

static final String	MITREID_CONNECT_1_1 = "mitreid-connect-1.1"

static final String	MITREID_CONNECT_1_2 = "mitreid-connect-1.2"

static final String	MITREID_CONNECT_1_3 = "mitreid-connect-1.3"

static final String	REFRESHTOKENS = "refreshTokens"

static final String	ACCESSTOKENS = "accessTokens"

static final String	WHITELISTEDSITES = "whitelistedSites"

static final String	BLACKLISTEDSITES = "blacklistedSites"

static final String	AUTHENTICATIONHOLDERS = "authenticationHolders"

static final String	GRANTS = "grants"

static final String	CLIENTS = "clients"

static final String	SYSTEMSCOPES = "systemScopes"

限定公開メンバ関数
Date	utcToDate (String value)

String	toUTCString (Date value)

非公開メンバ関数
void	writeRefreshTokens (JsonWriter writer) throws IOException

void	writeAccessTokens (JsonWriter writer) throws IOException

void	writeAuthenticationHolders (JsonWriter writer) throws IOException

void	writeGrants (JsonWriter writer) throws IOException

void	writeWhitelistedSites (JsonWriter writer) throws IOException

void	writeBlacklistedSites (JsonWriter writer) throws IOException

void	writeClients (JsonWriter writer)

void	writeSystemScopes (JsonWriter writer)

void	readRefreshTokens (JsonReader reader) throws IOException

void	readAccessTokens (JsonReader reader) throws IOException

void	readAuthenticationHolders (JsonReader reader) throws IOException

SavedUserAuthentication	readSavedUserAuthentication (JsonReader reader) throws IOException

void	readGrants (JsonReader reader) throws IOException

void	readWhitelistedSites (JsonReader reader) throws IOException

void	readBlacklistedSites (JsonReader reader) throws IOException

void	readClients (JsonReader reader) throws IOException

void	readSystemScopes (JsonReader reader) throws IOException

void	fixObjectReferences ()

静的非公開変数類
static final String	DEFAULT_SCOPE = "defaultScope"

static final String	RESTRICTED = "restricted"

static final String	ICON = "icon"

static final String	DYNAMICALLY_REGISTERED = "dynamicallyRegistered"

static final String	CLEAR_ACCESS_TOKENS_ON_REFRESH = "clearAccessTokensOnRefresh"

static final String	REUSE_REFRESH_TOKEN = "reuseRefreshToken"

static final String	ALLOW_INTROSPECTION = "allowIntrospection"

static final String	DESCRIPTION = "description"

static final String	REQUEST_URIS = "requestUris"

static final String	POST_LOGOUT_REDIRECT_URI = "postLogoutRedirectUri"

static final String	INTITATE_LOGIN_URI = "intitateLoginUri"

static final String	DEFAULT_ACR_VALUES = "defaultACRValues"

static final String	REQUIRE_AUTH_TIME = "requireAuthTime"

static final String	DEFAULT_MAX_AGE = "defaultMaxAge"

static final String	TOKEN_ENDPOINT_AUTH_SIGNING_ALG = "tokenEndpointAuthSigningAlg"

static final String	USER_INFO_ENCRYPTED_RESPONSE_ENC = "userInfoEncryptedResponseEnc"

static final String	USER_INFO_ENCRYPTED_RESPONSE_ALG = "userInfoEncryptedResponseAlg"

static final String	USER_INFO_SIGNED_RESPONSE_ALG = "userInfoSignedResponseAlg"

static final String	ID_TOKEN_ENCRYPTED_RESPONSE_ENC = "idTokenEncryptedResponseEnc"

static final String	ID_TOKEN_ENCRYPTED_RESPONSE_ALG = "idTokenEncryptedResponseAlg"

static final String	ID_TOKEN_SIGNED_RESPONSE_ALG = "idTokenSignedResponseAlg"

static final String	REQUEST_OBJECT_SIGNING_ALG = "requestObjectSigningAlg"

static final String	SUBJECT_TYPE = "subjectType"

static final String	SECTOR_IDENTIFIER_URI = "sectorIdentifierUri"

static final String	APPLICATION_TYPE = "applicationType"

static final String	JWKS = "jwks"

static final String	JWKS_URI = "jwksUri"

static final String	POLICY_URI = "policyUri"

static final String	GRANT_TYPES = "grantTypes"

static final String	TOKEN_ENDPOINT_AUTH_METHOD = "tokenEndpointAuthMethod"

static final String	TOS_URI = "tosUri"

static final String	CONTACTS = "contacts"

static final String	LOGO_URI = "logoUri"

static final String	REDIRECT_URIS = "redirectUris"

static final String	REFRESH_TOKEN_VALIDITY_SECONDS = "refreshTokenValiditySeconds"

static final String	ACCESS_TOKEN_VALIDITY_SECONDS = "accessTokenValiditySeconds"

static final String	ID_TOKEN_VALIDITY_SECONDS = "idTokenValiditySeconds"

static final String	DEVICE_CODE_VALIDITY_SECONDS = "deviceCodeValiditySeconds"

static final String	SECRET = "secret"

static final String	URI = "uri"

static final String	CREATOR_USER_ID = "creatorUserId"

static final String	APPROVED_ACCESS_TOKENS = "approvedAccessTokens"

static final String	ALLOWED_SCOPES = "allowedScopes"

static final String	USER_ID = "userId"

static final String	TIMEOUT_DATE = "timeoutDate"

static final String	CREATION_DATE = "creationDate"

static final String	ACCESS_DATE = "accessDate"

static final String	AUTHENTICATED = "authenticated"

static final String	SOURCE_CLASS = "sourceClass"

static final String	NAME = "name"

static final String	SAVED_USER_AUTHENTICATION = "savedUserAuthentication"

static final String	EXTENSIONS = "extensions"

static final String	RESPONSE_TYPES = "responseTypes"

static final String	REDIRECT_URI = "redirectUri"

static final String	APPROVED = "approved"

static final String	AUTHORITIES = "authorities"

static final String	RESOURCE_IDS = "resourceIds"

static final String	REQUEST_PARAMETERS = "requestParameters"

static final String	TYPE = "type"

static final String	SCOPE = "scope"

static final String	REFRESH_TOKEN_ID = "refreshTokenId"

static final String	VALUE = "value"

static final String	AUTHENTICATION_HOLDER_ID = "authenticationHolderId"

static final String	CLIENT_ID = "clientId"

static final String	EXPIRATION = "expiration"

static final String	CLAIMS_REDIRECT_URIS = "claimsRedirectUris"

static final String	ID = "id"

static final String	CODE_CHALLENGE_METHOD = "codeChallengeMethod"

static final String	SOFTWARE_STATEMENT = "softwareStatement"

static final String	SOFTWARE_VERSION = "softwareVersion"

static final String	SOFTWARE_ID = "softwareId"

static final Logger	logger = LoggerFactory.getLogger(MITREidDataService_1_3.class)

static final String	THIS_VERSION = MITREID_CONNECT_1_3

詳解

Data service to import and export MITREid 1.3 configuration.

著者: jricher; arielak

関数詳解

◆ exportData()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.exportData ( JsonWriter writer ) throws IOException

inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

                                                                      {
 
                 // version tag at the root
                 writer.name(THIS_VERSION);
 
                 writer.beginObject();
 
                 // clients list
                 writer.name(CLIENTS);
                 writer.beginArray();
                 writeClients(writer);
                 writer.endArray();
 
                 writer.name(GRANTS);
                 writer.beginArray();
                 writeGrants(writer);
                 writer.endArray();
 
                 writer.name(WHITELISTEDSITES);
                 writer.beginArray();
                 writeWhitelistedSites(writer);
                 writer.endArray();
 
                 writer.name(BLACKLISTEDSITES);
                 writer.beginArray();
                 writeBlacklistedSites(writer);
                 writer.endArray();
 
                 writer.name(AUTHENTICATIONHOLDERS);
                 writer.beginArray();
                 writeAuthenticationHolders(writer);
                 writer.endArray();
 
                 writer.name(ACCESSTOKENS);
                 writer.beginArray();
                 writeAccessTokens(writer);
                 writer.endArray();
 
                 writer.name(REFRESHTOKENS);
                 writer.beginArray();
                 writeRefreshTokens(writer);
                 writer.endArray();
 
                 writer.name(SYSTEMSCOPES);
                 writer.beginArray();
                 writeSystemScopes(writer);
                 writer.endArray();
 
                 for (MITREidDataServiceExtension extension : extensions) {
                         if (extension.supportsVersion(THIS_VERSION)) {
                                 extension.exportExtensionData(writer);
                                 break;
                         }
                 }
 
                 writer.endObject(); // end mitreid-connect-1.3
         }

◆ fixObjectReferences()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.fixObjectReferences ( )

inlineprivate

                                            {
                 logger.info("Fixing object references...");
                 for (Long oldRefreshTokenId : maps.getRefreshTokenToClientRefs().keySet()) {
                         String clientRef = maps.getRefreshTokenToClientRefs().get(oldRefreshTokenId);
                         ClientDetailsEntity client = clientRepository.getClientByClientId(clientRef);
                         Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
                         OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
                         refreshToken.setClient(client);
                         tokenRepository.saveRefreshToken(refreshToken);
                 }
                 for (Long oldRefreshTokenId : maps.getRefreshTokenToAuthHolderRefs().keySet()) {
                         Long oldAuthHolderId = maps.getRefreshTokenToAuthHolderRefs().get(oldRefreshTokenId);
                         Long newAuthHolderId = maps.getAuthHolderOldToNewIdMap().get(oldAuthHolderId);
                         AuthenticationHolderEntity authHolder = authHolderRepository.getById(newAuthHolderId);
                         Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
                         OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
                         refreshToken.setAuthenticationHolder(authHolder);
                         tokenRepository.saveRefreshToken(refreshToken);
                 }
                 for (Long oldAccessTokenId : maps.getAccessTokenToClientRefs().keySet()) {
                         String clientRef = maps.getAccessTokenToClientRefs().get(oldAccessTokenId);
                         ClientDetailsEntity client = clientRepository.getClientByClientId(clientRef);
                         Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
                         OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
                         accessToken.setClient(client);
                         tokenRepository.saveAccessToken(accessToken);
                 }
                 for (Long oldAccessTokenId : maps.getAccessTokenToAuthHolderRefs().keySet()) {
                         Long oldAuthHolderId = maps.getAccessTokenToAuthHolderRefs().get(oldAccessTokenId);
                         Long newAuthHolderId = maps.getAuthHolderOldToNewIdMap().get(oldAuthHolderId);
                         AuthenticationHolderEntity authHolder = authHolderRepository.getById(newAuthHolderId);
                         Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
                         OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
                         accessToken.setAuthenticationHolder(authHolder);
                         tokenRepository.saveAccessToken(accessToken);
                 }
                 for (Long oldAccessTokenId : maps.getAccessTokenToRefreshTokenRefs().keySet()) {
                         Long oldRefreshTokenId = maps.getAccessTokenToRefreshTokenRefs().get(oldAccessTokenId);
                         Long newRefreshTokenId = maps.getRefreshTokenOldToNewIdMap().get(oldRefreshTokenId);
                         OAuth2RefreshTokenEntity refreshToken = tokenRepository.getRefreshTokenById(newRefreshTokenId);
                         Long newAccessTokenId = maps.getAccessTokenOldToNewIdMap().get(oldAccessTokenId);
                         OAuth2AccessTokenEntity accessToken = tokenRepository.getAccessTokenById(newAccessTokenId);
                         accessToken.setRefreshToken(refreshToken);
                         tokenRepository.saveAccessToken(accessToken);
                 }
                 for (Long oldGrantId : maps.getGrantToAccessTokensRefs().keySet()) {
                         Set<Long> oldAccessTokenIds = maps.getGrantToAccessTokensRefs().get(oldGrantId);
 
                         Long newGrantId = maps.getGrantOldToNewIdMap().get(oldGrantId);
                         ApprovedSite site = approvedSiteRepository.getById(newGrantId);
 
                         for(Long oldTokenId : oldAccessTokenIds) {
                                 Long newTokenId = maps.getAccessTokenOldToNewIdMap().get(oldTokenId);
                                 OAuth2AccessTokenEntity token = tokenRepository.getAccessTokenById(newTokenId);
                                 token.setApprovedSite(site);
                                 tokenRepository.saveAccessToken(token);
                         }
 
                         approvedSiteRepository.save(site);
                 }
                 /*
                 refreshTokenToClientRefs.clear();
                 refreshTokenToAuthHolderRefs.clear();
                 accessTokenToClientRefs.clear();
                 accessTokenToAuthHolderRefs.clear();
                 accessTokenToRefreshTokenRefs.clear();
                 refreshTokenOldToNewIdMap.clear();
                 accessTokenOldToNewIdMap.clear();
                 grantOldToNewIdMap.clear();
                  */
                 logger.info("Done fixing object references.");
         }

◆ importData()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.importData ( JsonReader reader ) throws IOException

inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

                                                                      {
 
                 logger.info("Reading configuration for 1.3");
 
                 // this *HAS* to start as an object
                 reader.beginObject();
 
                 while (reader.hasNext()) {
                         JsonToken tok = reader.peek();
                         switch (tok) {
                                 case NAME:
                                         String name = reader.nextName();
                                         // find out which member it is
                                         if (name.equals(CLIENTS)) {
                                                 readClients(reader);
                                         } else if (name.equals(GRANTS)) {
                                                 readGrants(reader);
                                         } else if (name.equals(WHITELISTEDSITES)) {
                                                 readWhitelistedSites(reader);
                                         } else if (name.equals(BLACKLISTEDSITES)) {
                                                 readBlacklistedSites(reader);
                                         } else if (name.equals(AUTHENTICATIONHOLDERS)) {
                                                 readAuthenticationHolders(reader);
                                         } else if (name.equals(ACCESSTOKENS)) {
                                                 readAccessTokens(reader);
                                         } else if (name.equals(REFRESHTOKENS)) {
                                                 readRefreshTokens(reader);
                                         } else if (name.equals(SYSTEMSCOPES)) {
                                                 readSystemScopes(reader);
                                         } else {
                                                 boolean processed = false;
                                                 for (MITREidDataServiceExtension extension : extensions) {
                                                         if (extension.supportsVersion(THIS_VERSION)) {
                                                                 processed = extension.importExtensionData(name, reader);
                                                                 if (processed) {
                                                                         // if the extension processed data, break out of this inner loop
                                                                         // (only the first extension to claim an extension point gets it)
                                                                         break;
                                                                 }
                                                         }
                                                 }
                                                 if (!processed) {
                                                         // unknown token, skip it
                                                         reader.skipValue();
                                                 }
                                         }
                                         break;
                                 case END_OBJECT:
                                         // the object ended, we're done here
                                         reader.endObject();
                                         continue;
                                 default:
                                         logger.debug("Found unexpected entry");
                                         reader.skipValue();
                                         continue;
                         }
                 }
                 fixObjectReferences();
                 for (MITREidDataServiceExtension extension : extensions) {
                         if (extension.supportsVersion(THIS_VERSION)) {
                                 extension.fixExtensionObjectReferences(maps);
                                 break;
                         }
                 }
                 maps.clearAll();
         }

◆ readAccessTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readAccessTokens ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

引数

reader

例外

IOException

                                                                             {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         OAuth2AccessTokenEntity token = new OAuth2AccessTokenEntity();
                         reader.beginObject();
                         Long currentId = null;
                         String clientId = null;
                         Long authHolderId = null;
                         Long refreshTokenId = null;
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (reader.peek() == JsonToken.NULL) {
                                                         reader.skipValue();
                                                 } else if (name.equals(ID)) {
                                                         currentId = reader.nextLong();
                                                 } else if (name.equals(EXPIRATION)) {
                                                         Date date = utcToDate(reader.nextString());
                                                         token.setExpiration(date);
                                                 } else if (name.equals(VALUE)) {
                                                         String value = reader.nextString();
                                                         try {
                                                                 // all tokens are JWTs
                                                                 token.setJwt(JWTParser.parse(value));
                                                         } catch (ParseException ex) {
                                                                 logger.error("Unable to set refresh token value to {}", value, ex);
                                                         }
                                                 } else if (name.equals(CLIENT_ID)) {
                                                         clientId = reader.nextString();
                                                 } else if (name.equals(AUTHENTICATION_HOLDER_ID)) {
                                                         authHolderId = reader.nextLong();
                                                 } else if (name.equals(REFRESH_TOKEN_ID)) {
                                                         refreshTokenId = reader.nextLong();
                                                 } else if (name.equals(SCOPE)) {
                                                         Set<String> scope = readSet(reader);
                                                         token.setScope(scope);
                                                 } else if (name.equals(TYPE)) {
                                                         token.setTokenType(reader.nextString());
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         Long newId = tokenRepository.saveAccessToken(token).getId();
                         maps.getAccessTokenToClientRefs().put(currentId, clientId);
                         maps.getAccessTokenToAuthHolderRefs().put(currentId, authHolderId);
                         if (refreshTokenId != null) {
                                 maps.getAccessTokenToRefreshTokenRefs().put(currentId, refreshTokenId);
                         }
                         maps.getAccessTokenOldToNewIdMap().put(currentId, newId);
                         logger.debug("Read access token {}", currentId);
                 }
                 reader.endArray();
                 logger.info("Done reading access tokens");
         }

◆ readAuthenticationHolders()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readAuthenticationHolders ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                                      {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         AuthenticationHolderEntity ahe = new AuthenticationHolderEntity();
                         reader.beginObject();
                         Long currentId = null;
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (reader.peek() == JsonToken.NULL) {
                                                         reader.skipValue();
                                                 } else if (name.equals(ID)) {
                                                         currentId = reader.nextLong();
                                                 } else if (name.equals(REQUEST_PARAMETERS)) {
                                                         ahe.setRequestParameters(readMap(reader));
                                                 } else if (name.equals(CLIENT_ID)) {
                                                         ahe.setClientId(reader.nextString());
                                                 } else if (name.equals(SCOPE)) {
                                                         ahe.setScope(readSet(reader));
                                                 } else if (name.equals(RESOURCE_IDS)) {
                                                         ahe.setResourceIds(readSet(reader));
                                                 } else if (name.equals(AUTHORITIES)) {
                                                         Set<String> authorityStrs = readSet(reader);
                                                         Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
                                                         for (String s : authorityStrs) {
                                                                 GrantedAuthority ga = new SimpleGrantedAuthority(s);
                                                                 authorities.add(ga);
                                                         }
                                                         ahe.setAuthorities(authorities);
                                                 } else if (name.equals(APPROVED)) {
                                                         ahe.setApproved(reader.nextBoolean());
                                                 } else if (name.equals(REDIRECT_URI)) {
                                                         ahe.setRedirectUri(reader.nextString());
                                                 } else if (name.equals(RESPONSE_TYPES)) {
                                                         ahe.setResponseTypes(readSet(reader));
                                                 } else if (name.equals(EXTENSIONS)) {
                                                         ahe.setExtensions(readMap(reader));
                                                 } else if (name.equals(SAVED_USER_AUTHENTICATION)) {
                                                         ahe.setUserAuth(readSavedUserAuthentication(reader));
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         Long newId = authHolderRepository.save(ahe).getId();
                         maps.getAuthHolderOldToNewIdMap().put(currentId, newId);
                         logger.debug("Read authentication holder {}", currentId);
                 }
                 reader.endArray();
                 logger.info("Done reading authentication holders");
         }

◆ readBlacklistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readBlacklistedSites ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                                 {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         BlacklistedSite blSite = new BlacklistedSite();
                         reader.beginObject();
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (name.equals(ID)) {
                                                         reader.skipValue();
                                                 } else if (name.equals(URI)) {
                                                         blSite.setUri(reader.nextString());
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         blSiteRepository.save(blSite);
                 }
                 reader.endArray();
                 logger.info("Done reading blacklisted sites");
         }

◆ readClients()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readClients ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                        {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         ClientDetailsEntity client = new ClientDetailsEntity();
                         reader.beginObject();
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (reader.peek() == JsonToken.NULL) {
                                                         reader.skipValue();
                                                 } else if (name.equals(CLIENT_ID)) {
                                                         client.setClientId(reader.nextString());
                                                 } else if (name.equals(RESOURCE_IDS)) {
                                                         Set<String> resourceIds = readSet(reader);
                                                         client.setResourceIds(resourceIds);
                                                 } else if (name.equals(SECRET)) {
                                                         client.setClientSecret(reader.nextString());
                                                 } else if (name.equals(SCOPE)) {
                                                         Set<String> scope = readSet(reader);
                                                         client.setScope(scope);
                                                 } else if (name.equals(AUTHORITIES)) {
                                                         Set<String> authorityStrs = readSet(reader);
                                                         Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
                                                         for (String s : authorityStrs) {
                                                                 GrantedAuthority ga = new SimpleGrantedAuthority(s);
                                                                 authorities.add(ga);
                                                         }
                                                         client.setAuthorities(authorities);
                                                 } else if (name.equals(ACCESS_TOKEN_VALIDITY_SECONDS)) {
                                                         client.setAccessTokenValiditySeconds(reader.nextInt());
                                                 } else if (name.equals(REFRESH_TOKEN_VALIDITY_SECONDS)) {
                                                         client.setRefreshTokenValiditySeconds(reader.nextInt());
                                                 } else if (name.equals(ID_TOKEN_VALIDITY_SECONDS)) {
                                                         client.setIdTokenValiditySeconds(reader.nextInt());
                                                 } else if (name.equals(DEVICE_CODE_VALIDITY_SECONDS)) {
                                                         client.setDeviceCodeValiditySeconds(reader.nextInt());
                                                 } else if (name.equals(REDIRECT_URIS)) {
                                                         Set<String> redirectUris = readSet(reader);
                                                         client.setRedirectUris(redirectUris);
                                                 } else if (name.equals(CLAIMS_REDIRECT_URIS)) {
                                                         Set<String> claimsRedirectUris = readSet(reader);
                                                         client.setClaimsRedirectUris(claimsRedirectUris);
                                                 } else if (name.equals(NAME)) {
                                                         client.setClientName(reader.nextString());
                                                 } else if (name.equals(URI)) {
                                                         client.setClientUri(reader.nextString());
                                                 } else if (name.equals(LOGO_URI)) {
                                                         client.setLogoUri(reader.nextString());
                                                 } else if (name.equals(CONTACTS)) {
                                                         Set<String> contacts = readSet(reader);
                                                         client.setContacts(contacts);
                                                 } else if (name.equals(TOS_URI)) {
                                                         client.setTosUri(reader.nextString());
                                                 } else if (name.equals(TOKEN_ENDPOINT_AUTH_METHOD)) {
                                                         AuthMethod am = AuthMethod.getByValue(reader.nextString());
                                                         client.setTokenEndpointAuthMethod(am);
                                                 } else if (name.equals(GRANT_TYPES)) {
                                                         Set<String> grantTypes = readSet(reader);
                                                         client.setGrantTypes(grantTypes);
                                                 } else if (name.equals(RESPONSE_TYPES)) {
                                                         Set<String> responseTypes = readSet(reader);
                                                         client.setResponseTypes(responseTypes);
                                                 } else if (name.equals(POLICY_URI)) {
                                                         client.setPolicyUri(reader.nextString());
                                                 } else if (name.equals(APPLICATION_TYPE)) {
                                                         AppType appType = AppType.getByValue(reader.nextString());
                                                         client.setApplicationType(appType);
                                                 } else if (name.equals(SECTOR_IDENTIFIER_URI)) {
                                                         client.setSectorIdentifierUri(reader.nextString());
                                                 } else if (name.equals(SUBJECT_TYPE)) {
                                                         SubjectType st = SubjectType.getByValue(reader.nextString());
                                                         client.setSubjectType(st);
                                                 } else if (name.equals(JWKS_URI)) {
                                                         client.setJwksUri(reader.nextString());
                                                 } else if (name.equals(JWKS)) {
                                                         try {
                                                                 client.setJwks(JWKSet.parse(reader.nextString()));
                                                         } catch (ParseException e) {
                                                                 logger.error("Couldn't parse JWK Set", e);
                                                         }
                                                 } else if (name.equals(REQUEST_OBJECT_SIGNING_ALG)) {
                                                         JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                         client.setRequestObjectSigningAlg(alg);
                                                 } else if (name.equals(USER_INFO_ENCRYPTED_RESPONSE_ALG)) {
                                                         JWEAlgorithm alg = JWEAlgorithm.parse(reader.nextString());
                                                         client.setUserInfoEncryptedResponseAlg(alg);
                                                 } else if (name.equals(USER_INFO_ENCRYPTED_RESPONSE_ENC)) {
                                                         EncryptionMethod alg = EncryptionMethod.parse(reader.nextString());
                                                         client.setUserInfoEncryptedResponseEnc(alg);
                                                 } else if (name.equals(USER_INFO_SIGNED_RESPONSE_ALG)) {
                                                         JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                         client.setUserInfoSignedResponseAlg(alg);
                                                 } else if (name.equals(ID_TOKEN_SIGNED_RESPONSE_ALG)) {
                                                         JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                         client.setIdTokenSignedResponseAlg(alg);
                                                 } else if (name.equals(ID_TOKEN_ENCRYPTED_RESPONSE_ALG)) {
                                                         JWEAlgorithm alg = JWEAlgorithm.parse(reader.nextString());
                                                         client.setIdTokenEncryptedResponseAlg(alg);
                                                 } else if (name.equals(ID_TOKEN_ENCRYPTED_RESPONSE_ENC)) {
                                                         EncryptionMethod alg = EncryptionMethod.parse(reader.nextString());
                                                         client.setIdTokenEncryptedResponseEnc(alg);
                                                 } else if (name.equals(TOKEN_ENDPOINT_AUTH_SIGNING_ALG)) {
                                                         JWSAlgorithm alg = JWSAlgorithm.parse(reader.nextString());
                                                         client.setTokenEndpointAuthSigningAlg(alg);
                                                 } else if (name.equals(DEFAULT_MAX_AGE)) {
                                                         client.setDefaultMaxAge(reader.nextInt());
                                                 } else if (name.equals(REQUIRE_AUTH_TIME)) {
                                                         client.setRequireAuthTime(reader.nextBoolean());
                                                 } else if (name.equals(DEFAULT_ACR_VALUES)) {
                                                         Set<String> defaultACRvalues = readSet(reader);
                                                         client.setDefaultACRvalues(defaultACRvalues);
                                                 } else if (name.equals("initiateLoginUri")) {
                                                         client.setInitiateLoginUri(reader.nextString());
                                                 } else if (name.equals(POST_LOGOUT_REDIRECT_URI)) {
                                                         Set<String> postLogoutUris = readSet(reader);
                                                         client.setPostLogoutRedirectUris(postLogoutUris);
                                                 } else if (name.equals(REQUEST_URIS)) {
                                                         Set<String> requestUris = readSet(reader);
                                                         client.setRequestUris(requestUris);
                                                 } else if (name.equals(DESCRIPTION)) {
                                                         client.setClientDescription(reader.nextString());
                                                 } else if (name.equals(ALLOW_INTROSPECTION)) {
                                                         client.setAllowIntrospection(reader.nextBoolean());
                                                 } else if (name.equals(REUSE_REFRESH_TOKEN)) {
                                                         client.setReuseRefreshToken(reader.nextBoolean());
                                                 } else if (name.equals(CLEAR_ACCESS_TOKENS_ON_REFRESH)) {
                                                         client.setClearAccessTokensOnRefresh(reader.nextBoolean());
                                                 } else if (name.equals(DYNAMICALLY_REGISTERED)) {
                                                         client.setDynamicallyRegistered(reader.nextBoolean());
                                                 } else if (name.equals(CODE_CHALLENGE_METHOD)) {
                                                         client.setCodeChallengeMethod(PKCEAlgorithm.parse(reader.nextString()));
                                                 } else if (name.equals(SOFTWARE_ID)) {
                                                         client.setSoftwareId(reader.nextString());
                                                 } else if (name.equals(SOFTWARE_VERSION)) {
                                                         client.setSoftwareVersion(reader.nextString());
                                                 } else if (name.equals(SOFTWARE_STATEMENT)) {
                                                         try {
                                                                 client.setSoftwareStatement(JWTParser.parse(reader.nextString()));
                                                         } catch (ParseException e) {
                                                                 logger.error("Couldn't parse software statement", e);
                                                         }
                                                 } else if (name.equals(CREATION_DATE)) {
                                                         Date date = utcToDate(reader.nextString());
                                                         client.setCreatedAt(date);
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         clientRepository.saveClient(client);
                 }
                 reader.endArray();
                 logger.info("Done reading clients");
         }

◆ readGrants()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readGrants ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                       {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         ApprovedSite site = new ApprovedSite();
                         Long currentId = null;
                         Set<Long> tokenIds = null;
                         reader.beginObject();
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (reader.peek() == JsonToken.NULL) {
                                                         reader.skipValue();
                                                 } else if (name.equals(ID)) {
                                                         currentId = reader.nextLong();
                                                 } else if (name.equals(ACCESS_DATE)) {
                                                         Date date = utcToDate(reader.nextString());
                                                         site.setAccessDate(date);
                                                 } else if (name.equals(CLIENT_ID)) {
                                                         site.setClientId(reader.nextString());
                                                 } else if (name.equals(CREATION_DATE)) {
                                                         Date date = utcToDate(reader.nextString());
                                                         site.setCreationDate(date);
                                                 } else if (name.equals(TIMEOUT_DATE)) {
                                                         Date date = utcToDate(reader.nextString());
                                                         site.setTimeoutDate(date);
                                                 } else if (name.equals(USER_ID)) {
                                                         site.setUserId(reader.nextString());
                                                 } else if (name.equals(ALLOWED_SCOPES)) {
                                                         Set<String> allowedScopes = readSet(reader);
                                                         site.setAllowedScopes(allowedScopes);
                                                 } else if (name.equals(APPROVED_ACCESS_TOKENS)) {
                                                         tokenIds = readSet(reader);
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         Long newId = approvedSiteRepository.save(site).getId();
                         maps.getGrantOldToNewIdMap().put(currentId, newId);
                         if (tokenIds != null) {
                                 maps.getGrantToAccessTokensRefs().put(currentId, tokenIds);
                         }
                         logger.debug("Read grant {}", currentId);
                 }
                 reader.endArray();
                 logger.info("Done reading grants");
         }

◆ readRefreshTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readRefreshTokens ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

引数

reader

例外

IOException

                                                                              {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         OAuth2RefreshTokenEntity token = new OAuth2RefreshTokenEntity();
                         reader.beginObject();
                         Long currentId = null;
                         String clientId = null;
                         Long authHolderId = null;
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (reader.peek() == JsonToken.NULL) {
                                                         reader.skipValue();
                                                 } else if (name.equals(ID)) {
                                                         currentId = reader.nextLong();
                                                 } else if (name.equals(EXPIRATION)) {
                                                         Date date = utcToDate(reader.nextString());
                                                         token.setExpiration(date);
                                                 } else if (name.equals(VALUE)) {
                                                         String value = reader.nextString();
                                                         try {
                                                                 token.setJwt(JWTParser.parse(value));
                                                         } catch (ParseException ex) {
                                                                 logger.error("Unable to set refresh token value to {}", value, ex);
                                                         }
                                                 } else if (name.equals(CLIENT_ID)) {
                                                         clientId = reader.nextString();
                                                 } else if (name.equals(AUTHENTICATION_HOLDER_ID)) {
                                                         authHolderId = reader.nextLong();
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         Long newId = tokenRepository.saveRefreshToken(token).getId();
                         maps.getRefreshTokenToClientRefs().put(currentId, clientId);
                         maps.getRefreshTokenToAuthHolderRefs().put(currentId, authHolderId);
                         maps.getRefreshTokenOldToNewIdMap().put(currentId, newId);
                         logger.debug("Read refresh token {}", currentId);
                 }
                 reader.endArray();
                 logger.info("Done reading refresh tokens");
         }

◆ readSavedUserAuthentication()

SavedUserAuthentication org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readSavedUserAuthentication ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

戻り値

例外

IOException

                                                                                                           {
                 SavedUserAuthentication savedUserAuth = new SavedUserAuthentication();
                 reader.beginObject();
 
                 while (reader.hasNext()) {
                         switch(reader.peek()) {
                                 case END_OBJECT:
                                         continue;
                                 case NAME:
                                         String name = reader.nextName();
                                         if (reader.peek() == JsonToken.NULL) {
                                                 reader.skipValue();
                                         } else if (name.equals(NAME)) {
                                                 savedUserAuth.setName(reader.nextString());
                                         } else if (name.equals(SOURCE_CLASS)) {
                                                 savedUserAuth.setSourceClass(reader.nextString());
                                         } else if (name.equals(AUTHENTICATED)) {
                                                 savedUserAuth.setAuthenticated(reader.nextBoolean());
                                         } else if (name.equals(AUTHORITIES)) {
                                                 Set<String> authorityStrs = readSet(reader);
                                                 Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();
                                                 for (String s : authorityStrs) {
                                                         GrantedAuthority ga = new SimpleGrantedAuthority(s);
                                                         authorities.add(ga);
                                                 }
                                                 savedUserAuth.setAuthorities(authorities);
                                         } else {
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                         }
                                         break;
                                 default:
                                         logger.debug("Found unexpected entry");
                                         reader.skipValue();
                                         continue;
                         }
                 }
 
                 reader.endObject();
                 return savedUserAuth;
         }

◆ readSystemScopes()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readSystemScopes ( JsonReader reader ) throws IOException

inlineprivate

Read the list of system scopes from the reader and insert them into the scope repository.

引数

reader

例外

IOException

                                                                             {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         SystemScope scope = new SystemScope();
                         reader.beginObject();
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (reader.peek() == JsonToken.NULL) {
                                                         reader.skipValue();
                                                 } else if (name.equals(VALUE)) {
                                                         scope.setValue(reader.nextString());
                                                 } else if (name.equals(DESCRIPTION)) {
                                                         scope.setDescription(reader.nextString());
                                                 } else if (name.equals(RESTRICTED)) {
                                                         scope.setRestricted(reader.nextBoolean());
                                                 } else if (name.equals(DEFAULT_SCOPE)) {
                                                         scope.setDefaultScope(reader.nextBoolean());
                                                 } else if (name.equals(ICON)) {
                                                         scope.setIcon(reader.nextString());
                                                 } else {
                                                         logger.debug("found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         sysScopeRepository.save(scope);
                 }
                 reader.endArray();
                 logger.info("Done reading system scopes");
         }

◆ readWhitelistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.readWhitelistedSites ( JsonReader reader ) throws IOException

inlineprivate

引数

reader

例外

IOException

                                                                                 {
                 reader.beginArray();
                 while (reader.hasNext()) {
                         WhitelistedSite wlSite = new WhitelistedSite();
                         Long currentId = null;
                         reader.beginObject();
                         while (reader.hasNext()) {
                                 switch (reader.peek()) {
                                         case END_OBJECT:
                                                 continue;
                                         case NAME:
                                                 String name = reader.nextName();
                                                 if (name.equals(ID)) {
                                                         currentId = reader.nextLong();
                                                 } else if (name.equals(CLIENT_ID)) {
                                                         wlSite.setClientId(reader.nextString());
                                                 } else if (name.equals(CREATOR_USER_ID)) {
                                                         wlSite.setCreatorUserId(reader.nextString());
                                                 } else if (name.equals(ALLOWED_SCOPES)) {
                                                         Set<String> allowedScopes = readSet(reader);
                                                         wlSite.setAllowedScopes(allowedScopes);
                                                 } else {
                                                         logger.debug("Found unexpected entry");
                                                         reader.skipValue();
                                                 }
                                                 break;
                                         default:
                                                 logger.debug("Found unexpected entry");
                                                 reader.skipValue();
                                                 continue;
                                 }
                         }
                         reader.endObject();
                         Long newId = wlSiteRepository.save(wlSite).getId();
                         maps.getWhitelistedSiteOldToNewIdMap().put(currentId, newId);
                 }
                 reader.endArray();
                 logger.info("Done reading whitelisted sites");
         }

◆ supportsVersion()

boolean org.mitre.openid.connect.service.impl.MITREidDataService_1_3.supportsVersion ( String version )

inline

org.mitre.openid.connect.service.MITREidDataServiceを実装しています。

                                                        {
                 return THIS_VERSION.equals(version);
         }

◆ toUTCString()

String org.mitre.openid.connect.service.impl.MITREidDataServiceSupport.toUTCString ( Date value )

inlineprotectedinherited

                                                  {
                 if (value == null) {
                         return null;
                 }
                 return dateFormatter.print(value, Locale.ENGLISH);
         }

◆ utcToDate()

Date org.mitre.openid.connect.service.impl.MITREidDataServiceSupport.utcToDate ( String value )

inlineprotectedinherited

                                                {
                 if (value == null) {
                         return null;
                 }
                 try {
                         return dateFormatter.parse(value, Locale.ENGLISH);
                 } catch (ParseException ex) {
                         logger.error("Unable to parse datetime {}", value, ex);
                 }
                 return null;
         }

◆ writeAccessTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeAccessTokens ( JsonWriter writer ) throws IOException

inlineprivate

引数

writer

                                                                              {
                 for (OAuth2AccessTokenEntity token : tokenRepository.getAllAccessTokens()) {
                         writer.beginObject();
                         writer.name(ID).value(token.getId());
                         writer.name(EXPIRATION).value(toUTCString(token.getExpiration()));
                         writer.name(CLIENT_ID)
                         .value((token.getClient() != null) ? token.getClient().getClientId() : null);
                         writer.name(AUTHENTICATION_HOLDER_ID)
                         .value((token.getAuthenticationHolder() != null) ? token.getAuthenticationHolder().getId() : null);
                         writer.name(REFRESH_TOKEN_ID)
                         .value((token.getRefreshToken() != null) ? token.getRefreshToken().getId() : null);
                         writer.name(SCOPE);
                         writer.beginArray();
                         for (String s : token.getScope()) {
                                 writer.value(s);
                         }
                         writer.endArray();
                         writer.name(TYPE).value(token.getTokenType());
                         writer.name(VALUE).value(token.getValue());
                         writer.endObject();
                         logger.debug("Wrote access token {}", token.getId());
                 }
                 logger.info("Done writing access tokens");
         }

◆ writeAuthenticationHolders()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeAuthenticationHolders ( JsonWriter writer ) throws IOException

inlineprivate

引数

writer

                                                                                       {
                 for (AuthenticationHolderEntity holder : authHolderRepository.getAll()) {
                         writer.beginObject();
                         writer.name(ID).value(holder.getId());
 
                         writer.name(REQUEST_PARAMETERS);
                         writer.beginObject();
                         for (Entry<String, String> entry : holder.getRequestParameters().entrySet()) {
                                 writer.name(entry.getKey()).value(entry.getValue());
                         }
                         writer.endObject();
                         writer.name(CLIENT_ID).value(holder.getClientId());
                         Set<String> scope = holder.getScope();
                         writer.name(SCOPE);
                         writer.beginArray();
                         for (String s : scope) {
                                 writer.value(s);
                         }
                         writer.endArray();
                         writer.name(RESOURCE_IDS);
                         writer.beginArray();
                         if (holder.getResourceIds() != null) {
                                 for (String s : holder.getResourceIds()) {
                                         writer.value(s);
                                 }
                         }
                         writer.endArray();
                         writer.name(AUTHORITIES);
                         writer.beginArray();
                         for (GrantedAuthority authority : holder.getAuthorities()) {
                                 writer.value(authority.getAuthority());
                         }
                         writer.endArray();
                         writer.name(APPROVED).value(holder.isApproved());
                         writer.name(REDIRECT_URI).value(holder.getRedirectUri());
                         writer.name(RESPONSE_TYPES);
                         writer.beginArray();
                         for (String s : holder.getResponseTypes()) {
                                 writer.value(s);
                         }
                         writer.endArray();
                         writer.name(EXTENSIONS);
                         writer.beginObject();
                         for (Entry<String, Serializable> entry : holder.getExtensions().entrySet()) {
                                 // while the extension map itself is Serializable, we enforce storage of Strings
                                 if (entry.getValue() instanceof String) {
                                         writer.name(entry.getKey()).value((String) entry.getValue());
                                 } else {
                                         logger.warn("Skipping non-string extension: " + entry);
                                 }
                         }
                         writer.endObject();
 
                         writer.name(SAVED_USER_AUTHENTICATION);
                         if (holder.getUserAuth() != null) {
                                 writer.beginObject();
                                 writer.name(NAME).value(holder.getUserAuth().getName());
                                 writer.name(SOURCE_CLASS).value(holder.getUserAuth().getSourceClass());
                                 writer.name(AUTHENTICATED).value(holder.getUserAuth().isAuthenticated());
                                 writer.name(AUTHORITIES);
                                 writer.beginArray();
                                 for (GrantedAuthority authority : holder.getUserAuth().getAuthorities()) {
                                         writer.value(authority.getAuthority());
                                 }
                                 writer.endArray();
 
                                 writer.endObject();
                         } else {
                                 writer.nullValue();
                         }
 
 
                         writer.endObject();
                         logger.debug("Wrote authentication holder {}", holder.getId());
                 }
                 logger.info("Done writing authentication holders");
         }

◆ writeBlacklistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeBlacklistedSites ( JsonWriter writer ) throws IOException

inlineprivate

引数

writer

                                                                                  {
                 for (BlacklistedSite blSite : blSiteRepository.getAll()) {
                         writer.beginObject();
                         writer.name(ID).value(blSite.getId());
                         writer.name(URI).value(blSite.getUri());
                         writer.endObject();
                         logger.debug("Wrote blacklisted site {}", blSite.getId());
                 }
                 logger.info("Done writing blacklisted sites");
         }

◆ writeClients()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeClients ( JsonWriter writer )

inlineprivate

引数

writer

                                                      {
                 for (ClientDetailsEntity client : clientRepository.getAllClients()) {
                         try {
                                 writer.beginObject();
                                 writer.name(CLIENT_ID).value(client.getClientId());
                                 writer.name(RESOURCE_IDS);
                                 writeNullSafeArray(writer, client.getResourceIds());
 
                                 writer.name(SECRET).value(client.getClientSecret());
 
                                 writer.name(SCOPE);
                                 writeNullSafeArray(writer, client.getScope());
 
                                 writer.name(AUTHORITIES);
                                 writer.beginArray();
                                 for (GrantedAuthority authority : client.getAuthorities()) {
                                         writer.value(authority.getAuthority());
                                 }
                                 writer.endArray();
                                 writer.name(ACCESS_TOKEN_VALIDITY_SECONDS).value(client.getAccessTokenValiditySeconds());
                                 writer.name(REFRESH_TOKEN_VALIDITY_SECONDS).value(client.getRefreshTokenValiditySeconds());
                                 writer.name(ID_TOKEN_VALIDITY_SECONDS).value(client.getIdTokenValiditySeconds());
                                 writer.name(DEVICE_CODE_VALIDITY_SECONDS).value(client.getDeviceCodeValiditySeconds());
                                 writer.name(REDIRECT_URIS);
                                 writeNullSafeArray(writer, client.getRedirectUris());
                                 writer.name(CLAIMS_REDIRECT_URIS);
                                 writeNullSafeArray(writer, client.getClaimsRedirectUris());
                                 writer.name(NAME).value(client.getClientName());
                                 writer.name(URI).value(client.getClientUri());
                                 writer.name(LOGO_URI).value(client.getLogoUri());
                                 writer.name(CONTACTS);
                                 writeNullSafeArray(writer, client.getContacts());
                                 writer.name(TOS_URI).value(client.getTosUri());
                                 writer.name(TOKEN_ENDPOINT_AUTH_METHOD)
                                 .value((client.getTokenEndpointAuthMethod() != null) ? client.getTokenEndpointAuthMethod().getValue() : null);
                                 writer.name(GRANT_TYPES);
                                 writer.beginArray();
                                 for (String s : client.getGrantTypes()) {
                                         writer.value(s);
                                 }
                                 writer.endArray();
                                 writer.name(RESPONSE_TYPES);
                                 writer.beginArray();
                                 for (String s : client.getResponseTypes()) {
                                         writer.value(s);
                                 }
                                 writer.endArray();
                                 writer.name(POLICY_URI).value(client.getPolicyUri());
                                 writer.name(JWKS_URI).value(client.getJwksUri());
                                 writer.name(JWKS).value((client.getJwks() != null) ? client.getJwks().toString() : null);
                                 writer.name(APPLICATION_TYPE)
                                 .value((client.getApplicationType() != null) ? client.getApplicationType().getValue() : null);
                                 writer.name(SECTOR_IDENTIFIER_URI).value(client.getSectorIdentifierUri());
                                 writer.name(SUBJECT_TYPE)
                                 .value((client.getSubjectType() != null) ? client.getSubjectType().getValue() : null);
                                 writer.name(REQUEST_OBJECT_SIGNING_ALG)
                                 .value((client.getRequestObjectSigningAlg() != null) ? client.getRequestObjectSigningAlg().getName() : null);
                                 writer.name(ID_TOKEN_SIGNED_RESPONSE_ALG)
                                 .value((client.getIdTokenSignedResponseAlg() != null) ? client.getIdTokenSignedResponseAlg().getName() : null);
                                 writer.name(ID_TOKEN_ENCRYPTED_RESPONSE_ALG)
                                 .value((client.getIdTokenEncryptedResponseAlg() != null) ? client.getIdTokenEncryptedResponseAlg().getName() : null);
                                 writer.name(ID_TOKEN_ENCRYPTED_RESPONSE_ENC)
                                 .value((client.getIdTokenEncryptedResponseEnc() != null) ? client.getIdTokenEncryptedResponseEnc().getName() : null);
                                 writer.name(USER_INFO_SIGNED_RESPONSE_ALG)
                                 .value((client.getUserInfoSignedResponseAlg() != null) ? client.getUserInfoSignedResponseAlg().getName() : null);
                                 writer.name(USER_INFO_ENCRYPTED_RESPONSE_ALG)
                                 .value((client.getUserInfoEncryptedResponseAlg() != null) ? client.getUserInfoEncryptedResponseAlg().getName() : null);
                                 writer.name(USER_INFO_ENCRYPTED_RESPONSE_ENC)
                                 .value((client.getUserInfoEncryptedResponseEnc() != null) ? client.getUserInfoEncryptedResponseEnc().getName() : null);
                                 writer.name(TOKEN_ENDPOINT_AUTH_SIGNING_ALG)
                                 .value((client.getTokenEndpointAuthSigningAlg() != null) ? client.getTokenEndpointAuthSigningAlg().getName() : null);
                                 writer.name(DEFAULT_MAX_AGE).value(client.getDefaultMaxAge());
                                 Boolean requireAuthTime = null;
                                 try {
                                         requireAuthTime = client.getRequireAuthTime();
                                 } catch (NullPointerException e) {
                                 }
                                 if (requireAuthTime != null) {
                                         writer.name(REQUIRE_AUTH_TIME).value(requireAuthTime);
                                 }
                                 writer.name(DEFAULT_ACR_VALUES);
                                 writeNullSafeArray(writer, client.getDefaultACRvalues());
                                 writer.name(INTITATE_LOGIN_URI).value(client.getInitiateLoginUri());
                                 writer.name(POST_LOGOUT_REDIRECT_URI);
                                 writeNullSafeArray(writer, client.getPostLogoutRedirectUris());
                                 writer.name(REQUEST_URIS);
                                 writeNullSafeArray(writer, client.getRequestUris());
                                 writer.name(DESCRIPTION).value(client.getClientDescription());
                                 writer.name(ALLOW_INTROSPECTION).value(client.isAllowIntrospection());
                                 writer.name(REUSE_REFRESH_TOKEN).value(client.isReuseRefreshToken());
                                 writer.name(CLEAR_ACCESS_TOKENS_ON_REFRESH).value(client.isClearAccessTokensOnRefresh());
                                 writer.name(DYNAMICALLY_REGISTERED).value(client.isDynamicallyRegistered());
                                 writer.name(CODE_CHALLENGE_METHOD).value(client.getCodeChallengeMethod() != null ? client.getCodeChallengeMethod().getName() : null);
                                 writer.name(SOFTWARE_ID).value(client.getSoftwareId());
                                 writer.name(SOFTWARE_VERSION).value(client.getSoftwareVersion());
                                 writer.name(SOFTWARE_STATEMENT).value(client.getSoftwareStatement() != null ? client.getSoftwareStatement().serialize() : null);
                                 writer.name(CREATION_DATE).value(toUTCString(client.getCreatedAt()));
                                 writer.endObject();
                                 logger.debug("Wrote client {}", client.getId());
                         } catch (IOException ex) {
                                 logger.error("Unable to write client {}", client.getId(), ex);
                         }
                 }
                 logger.info("Done writing clients");
         }

◆ writeGrants()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeGrants ( JsonWriter writer ) throws IOException

inlineprivate

引数

writer

                                                                        {
                 for (ApprovedSite site : approvedSiteRepository.getAll()) {
                         writer.beginObject();
                         writer.name(ID).value(site.getId());
                         writer.name(ACCESS_DATE).value(toUTCString(site.getAccessDate()));
                         writer.name(CLIENT_ID).value(site.getClientId());
                         writer.name(CREATION_DATE).value(toUTCString(site.getCreationDate()));
                         writer.name(TIMEOUT_DATE).value(toUTCString(site.getTimeoutDate()));
                         writer.name(USER_ID).value(site.getUserId());
                         writer.name(ALLOWED_SCOPES);
                         writeNullSafeArray(writer, site.getAllowedScopes());
                         List<OAuth2AccessTokenEntity> tokens = tokenRepository.getAccessTokensForApprovedSite(site);
                         writer.name(APPROVED_ACCESS_TOKENS);
                         writer.beginArray();
                         for (OAuth2AccessTokenEntity token : tokens) {
                                 writer.value(token.getId());
                         }
                         writer.endArray();
                         writer.endObject();
                         logger.debug("Wrote grant {}", site.getId());
                 }
                 logger.info("Done writing grants");
         }

◆ writeRefreshTokens()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeRefreshTokens ( JsonWriter writer ) throws IOException

inlineprivate

引数

writer

                                                                               {
                 for (OAuth2RefreshTokenEntity token : tokenRepository.getAllRefreshTokens()) {
                         writer.beginObject();
                         writer.name(ID).value(token.getId());
                         writer.name(EXPIRATION).value(toUTCString(token.getExpiration()));
                         writer.name(CLIENT_ID)
                         .value((token.getClient() != null) ? token.getClient().getClientId() : null);
                         writer.name(AUTHENTICATION_HOLDER_ID)
                         .value((token.getAuthenticationHolder() != null) ? token.getAuthenticationHolder().getId() : null);
                         writer.name(VALUE).value(token.getValue());
                         writer.endObject();
                         logger.debug("Wrote refresh token {}", token.getId());
                 }
                 logger.info("Done writing refresh tokens");
         }

◆ writeSystemScopes()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeSystemScopes ( JsonWriter writer )

inlineprivate

引数

writer

                                                           {
                 for (SystemScope sysScope : sysScopeRepository.getAll()) {
                         try {
                                 writer.beginObject();
                                 writer.name(ID).value(sysScope.getId());
                                 writer.name(DESCRIPTION).value(sysScope.getDescription());
                                 writer.name(ICON).value(sysScope.getIcon());
                                 writer.name(VALUE).value(sysScope.getValue());
                                 writer.name(RESTRICTED).value(sysScope.isRestricted());
                                 writer.name(DEFAULT_SCOPE).value(sysScope.isDefaultScope());
                                 writer.endObject();
                                 logger.debug("Wrote system scope {}", sysScope.getId());
                         } catch (IOException ex) {
                                 logger.error("Unable to write system scope {}", sysScope.getId(), ex);
                         }
                 }
                 logger.info("Done writing system scopes");
         }

◆ writeWhitelistedSites()

void org.mitre.openid.connect.service.impl.MITREidDataService_1_3.writeWhitelistedSites ( JsonWriter writer ) throws IOException

inlineprivate

引数

writer

                                                                                  {
                 for (WhitelistedSite wlSite : wlSiteRepository.getAll()) {
                         writer.beginObject();
                         writer.name(ID).value(wlSite.getId());
                         writer.name(CLIENT_ID).value(wlSite.getClientId());
                         writer.name(CREATOR_USER_ID).value(wlSite.getCreatorUserId());
                         writer.name(ALLOWED_SCOPES);
                         writeNullSafeArray(writer, wlSite.getAllowedScopes());
                         writer.endObject();
                         logger.debug("Wrote whitelisted site {}", wlSite.getId());
                 }
                 logger.info("Done writing whitelisted sites");
         }

メンバ詳解

◆ ACCESS_DATE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ACCESS_DATE = "accessDate"

staticprivate

◆ ACCESS_TOKEN_VALIDITY_SECONDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ACCESS_TOKEN_VALIDITY_SECONDS = "accessTokenValiditySeconds"

staticprivate

◆ ACCESSTOKENS

final String org.mitre.openid.connect.service.MITREidDataService.ACCESSTOKENS = "accessTokens"

staticinherited

◆ ALLOW_INTROSPECTION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ALLOW_INTROSPECTION = "allowIntrospection"

staticprivate

◆ ALLOWED_SCOPES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ALLOWED_SCOPES = "allowedScopes"

staticprivate

◆ APPLICATION_TYPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.APPLICATION_TYPE = "applicationType"

staticprivate

◆ APPROVED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.APPROVED = "approved"

staticprivate

◆ APPROVED_ACCESS_TOKENS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.APPROVED_ACCESS_TOKENS = "approvedAccessTokens"

staticprivate

◆ approvedSiteRepository

ApprovedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.approvedSiteRepository

private

◆ AUTHENTICATED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.AUTHENTICATED = "authenticated"

staticprivate

◆ AUTHENTICATION_HOLDER_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.AUTHENTICATION_HOLDER_ID = "authenticationHolderId"

staticprivate

◆ AUTHENTICATIONHOLDERS

final String org.mitre.openid.connect.service.MITREidDataService.AUTHENTICATIONHOLDERS = "authenticationHolders"

staticinherited

◆ authHolderRepository

AuthenticationHolderRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.authHolderRepository

private

◆ AUTHORITIES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.AUTHORITIES = "authorities"

staticprivate

◆ BLACKLISTEDSITES

final String org.mitre.openid.connect.service.MITREidDataService.BLACKLISTEDSITES = "blacklistedSites"

staticinherited

◆ blSiteRepository

BlacklistedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.blSiteRepository

private

◆ CLAIMS_REDIRECT_URIS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CLAIMS_REDIRECT_URIS = "claimsRedirectUris"

staticprivate

◆ CLEAR_ACCESS_TOKENS_ON_REFRESH

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CLEAR_ACCESS_TOKENS_ON_REFRESH = "clearAccessTokensOnRefresh"

staticprivate

◆ CLIENT_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CLIENT_ID = "clientId"

staticprivate

◆ clientRepository

OAuth2ClientRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.clientRepository

private

◆ CLIENTS

final String org.mitre.openid.connect.service.MITREidDataService.CLIENTS = "clients"

staticinherited

◆ CODE_CHALLENGE_METHOD

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CODE_CHALLENGE_METHOD = "codeChallengeMethod"

staticprivate

◆ CONTACTS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CONTACTS = "contacts"

staticprivate

◆ CREATION_DATE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CREATION_DATE = "creationDate"

staticprivate

◆ CREATOR_USER_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.CREATOR_USER_ID = "creatorUserId"

staticprivate

◆ DEFAULT_ACR_VALUES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.DEFAULT_ACR_VALUES = "defaultACRValues"

staticprivate

◆ DEFAULT_MAX_AGE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.DEFAULT_MAX_AGE = "defaultMaxAge"

staticprivate

◆ DEFAULT_SCOPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.DEFAULT_SCOPE = "defaultScope"

staticprivate

◆ DESCRIPTION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.DESCRIPTION = "description"

staticprivate

◆ DEVICE_CODE_VALIDITY_SECONDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.DEVICE_CODE_VALIDITY_SECONDS = "deviceCodeValiditySeconds"

staticprivate

◆ DYNAMICALLY_REGISTERED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.DYNAMICALLY_REGISTERED = "dynamicallyRegistered"

staticprivate

◆ EXPIRATION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.EXPIRATION = "expiration"

staticprivate

◆ EXTENSIONS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.EXTENSIONS = "extensions"

staticprivate

◆ extensions

List<MITREidDataServiceExtension> org.mitre.openid.connect.service.impl.MITREidDataService_1_3.extensions = Collections.emptyList()

private

◆ GRANT_TYPES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.GRANT_TYPES = "grantTypes"

staticprivate

◆ GRANTS

final String org.mitre.openid.connect.service.MITREidDataService.GRANTS = "grants"

staticinherited

◆ ICON

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ICON = "icon"

staticprivate

◆ ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ID = "id"

staticprivate

◆ ID_TOKEN_ENCRYPTED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ID_TOKEN_ENCRYPTED_RESPONSE_ALG = "idTokenEncryptedResponseAlg"

staticprivate

◆ ID_TOKEN_ENCRYPTED_RESPONSE_ENC

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ID_TOKEN_ENCRYPTED_RESPONSE_ENC = "idTokenEncryptedResponseEnc"

staticprivate

◆ ID_TOKEN_SIGNED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ID_TOKEN_SIGNED_RESPONSE_ALG = "idTokenSignedResponseAlg"

staticprivate

◆ ID_TOKEN_VALIDITY_SECONDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.ID_TOKEN_VALIDITY_SECONDS = "idTokenValiditySeconds"

staticprivate

◆ INTITATE_LOGIN_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.INTITATE_LOGIN_URI = "intitateLoginUri"

staticprivate

◆ JWKS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.JWKS = "jwks"

staticprivate

◆ JWKS_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.JWKS_URI = "jwksUri"

staticprivate

◆ logger

final Logger org.mitre.openid.connect.service.impl.MITREidDataService_1_3.logger = LoggerFactory.getLogger(MITREidDataService_1_3.class)

staticprivate

Logger for this class

◆ LOGO_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.LOGO_URI = "logoUri"

staticprivate

◆ maps

MITREidDataServiceMaps org.mitre.openid.connect.service.impl.MITREidDataService_1_3.maps = new MITREidDataServiceMaps()

private

◆ MITREID_CONNECT_1_0

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_0 = "mitreid-connect-1.0"

staticinherited

Data member for 1.X configurations

◆ MITREID_CONNECT_1_1

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_1 = "mitreid-connect-1.1"

staticinherited

◆ MITREID_CONNECT_1_2

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_2 = "mitreid-connect-1.2"

staticinherited

◆ MITREID_CONNECT_1_3

final String org.mitre.openid.connect.service.MITREidDataService.MITREID_CONNECT_1_3 = "mitreid-connect-1.3"

staticinherited

◆ NAME

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.NAME = "name"

staticprivate

◆ POLICY_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.POLICY_URI = "policyUri"

staticprivate

◆ POST_LOGOUT_REDIRECT_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.POST_LOGOUT_REDIRECT_URI = "postLogoutRedirectUri"

staticprivate

◆ REDIRECT_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REDIRECT_URI = "redirectUri"

staticprivate

◆ REDIRECT_URIS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REDIRECT_URIS = "redirectUris"

staticprivate

◆ REFRESH_TOKEN_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REFRESH_TOKEN_ID = "refreshTokenId"

staticprivate

◆ REFRESH_TOKEN_VALIDITY_SECONDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REFRESH_TOKEN_VALIDITY_SECONDS = "refreshTokenValiditySeconds"

staticprivate

◆ REFRESHTOKENS

final String org.mitre.openid.connect.service.MITREidDataService.REFRESHTOKENS = "refreshTokens"

staticinherited

◆ REQUEST_OBJECT_SIGNING_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REQUEST_OBJECT_SIGNING_ALG = "requestObjectSigningAlg"

staticprivate

◆ REQUEST_PARAMETERS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REQUEST_PARAMETERS = "requestParameters"

staticprivate

◆ REQUEST_URIS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REQUEST_URIS = "requestUris"

staticprivate

◆ REQUIRE_AUTH_TIME

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REQUIRE_AUTH_TIME = "requireAuthTime"

staticprivate

◆ RESOURCE_IDS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.RESOURCE_IDS = "resourceIds"

staticprivate

◆ RESPONSE_TYPES

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.RESPONSE_TYPES = "responseTypes"

staticprivate

◆ RESTRICTED

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.RESTRICTED = "restricted"

staticprivate

◆ REUSE_REFRESH_TOKEN

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.REUSE_REFRESH_TOKEN = "reuseRefreshToken"

staticprivate

◆ SAVED_USER_AUTHENTICATION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SAVED_USER_AUTHENTICATION = "savedUserAuthentication"

staticprivate

◆ SCOPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SCOPE = "scope"

staticprivate

◆ SECRET

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SECRET = "secret"

staticprivate

◆ SECTOR_IDENTIFIER_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SECTOR_IDENTIFIER_URI = "sectorIdentifierUri"

staticprivate

◆ SOFTWARE_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SOFTWARE_ID = "softwareId"

staticprivate

◆ SOFTWARE_STATEMENT

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SOFTWARE_STATEMENT = "softwareStatement"

staticprivate

◆ SOFTWARE_VERSION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SOFTWARE_VERSION = "softwareVersion"

staticprivate

◆ SOURCE_CLASS

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SOURCE_CLASS = "sourceClass"

staticprivate

◆ SUBJECT_TYPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.SUBJECT_TYPE = "subjectType"

staticprivate

◆ sysScopeRepository

SystemScopeRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.sysScopeRepository

private

◆ SYSTEMSCOPES

final String org.mitre.openid.connect.service.MITREidDataService.SYSTEMSCOPES = "systemScopes"

staticinherited

◆ THIS_VERSION

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.THIS_VERSION = MITREID_CONNECT_1_3

staticprivate

◆ TIMEOUT_DATE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.TIMEOUT_DATE = "timeoutDate"

staticprivate

◆ TOKEN_ENDPOINT_AUTH_METHOD

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.TOKEN_ENDPOINT_AUTH_METHOD = "tokenEndpointAuthMethod"

staticprivate

◆ TOKEN_ENDPOINT_AUTH_SIGNING_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.TOKEN_ENDPOINT_AUTH_SIGNING_ALG = "tokenEndpointAuthSigningAlg"

staticprivate

◆ tokenRepository

OAuth2TokenRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.tokenRepository

private

◆ TOS_URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.TOS_URI = "tosUri"

staticprivate

◆ TYPE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.TYPE = "type"

staticprivate

◆ URI

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.URI = "uri"

staticprivate

◆ USER_ID

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.USER_ID = "userId"

staticprivate

◆ USER_INFO_ENCRYPTED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.USER_INFO_ENCRYPTED_RESPONSE_ALG = "userInfoEncryptedResponseAlg"

staticprivate

◆ USER_INFO_ENCRYPTED_RESPONSE_ENC

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.USER_INFO_ENCRYPTED_RESPONSE_ENC = "userInfoEncryptedResponseEnc"

staticprivate

◆ USER_INFO_SIGNED_RESPONSE_ALG

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.USER_INFO_SIGNED_RESPONSE_ALG = "userInfoSignedResponseAlg"

staticprivate

◆ VALUE

final String org.mitre.openid.connect.service.impl.MITREidDataService_1_3.VALUE = "value"

staticprivate

◆ WHITELISTEDSITES

final String org.mitre.openid.connect.service.MITREidDataService.WHITELISTEDSITES = "whitelistedSites"

staticinherited

◆ wlSiteRepository

WhitelistedSiteRepository org.mitre.openid.connect.service.impl.MITREidDataService_1_3.wlSiteRepository

private

このクラス詳解は次のファイルから抽出されました:

D:/AppData/OpenId/mitreid-connect/src/openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/MITREidDataService_1_3.java

非公開変数類
OAuth2ClientRepository	clientRepository

ApprovedSiteRepository	approvedSiteRepository

WhitelistedSiteRepository	wlSiteRepository

BlacklistedSiteRepository	blSiteRepository

AuthenticationHolderRepository	authHolderRepository

OAuth2TokenRepository	tokenRepository

SystemScopeRepository	sysScopeRepository

List< MITREidDataServiceExtension >	extensions = Collections.emptyList()

MITREidDataServiceMaps	maps = new MITREidDataServiceMaps()

公開メンバ関数

静的公開変数類

限定公開メンバ関数

非公開メンバ関数

非公開変数類

静的非公開変数類

詳解

関数詳解

◆ exportData()

◆ fixObjectReferences()

◆ importData()

◆ readAccessTokens()

◆ readAuthenticationHolders()

◆ readBlacklistedSites()

◆ readClients()

◆ readGrants()

◆ readRefreshTokens()

◆ readSavedUserAuthentication()

◆ readSystemScopes()

◆ readWhitelistedSites()

◆ supportsVersion()

◆ toUTCString()

◆ utcToDate()

◆ writeAccessTokens()

◆ writeAuthenticationHolders()

◆ writeBlacklistedSites()

◆ writeClients()

◆ writeGrants()

◆ writeRefreshTokens()

◆ writeSystemScopes()

◆ writeWhitelistedSites()

メンバ詳解

◆ ACCESS_DATE

◆ ACCESS_TOKEN_VALIDITY_SECONDS

◆ ACCESSTOKENS

◆ ALLOW_INTROSPECTION

◆ ALLOWED_SCOPES

◆ APPLICATION_TYPE

◆ APPROVED

◆ APPROVED_ACCESS_TOKENS

◆ approvedSiteRepository

◆ AUTHENTICATED

◆ AUTHENTICATION_HOLDER_ID

◆ AUTHENTICATIONHOLDERS

◆ authHolderRepository

◆ AUTHORITIES

◆ BLACKLISTEDSITES

◆ blSiteRepository

◆ CLAIMS_REDIRECT_URIS

◆ CLEAR_ACCESS_TOKENS_ON_REFRESH

◆ CLIENT_ID

◆ clientRepository

◆ CLIENTS

◆ CODE_CHALLENGE_METHOD

◆ CONTACTS

◆ CREATION_DATE

◆ CREATOR_USER_ID

◆ DEFAULT_ACR_VALUES

◆ DEFAULT_MAX_AGE

◆ DEFAULT_SCOPE

◆ DESCRIPTION

◆ DEVICE_CODE_VALIDITY_SECONDS

◆ DYNAMICALLY_REGISTERED

◆ EXPIRATION

◆ EXTENSIONS

◆ extensions

◆ GRANT_TYPES

◆ GRANTS

◆ ICON

◆ ID

◆ ID_TOKEN_ENCRYPTED_RESPONSE_ALG

◆ ID_TOKEN_ENCRYPTED_RESPONSE_ENC

◆ ID_TOKEN_SIGNED_RESPONSE_ALG

◆ ID_TOKEN_VALIDITY_SECONDS

◆ INTITATE_LOGIN_URI

◆ JWKS

◆ JWKS_URI

◆ logger

◆ LOGO_URI

◆ maps